ead274f7ec552e5f1e0b72828b2e3d295320e2ba764692d46fb84a953192724b

Sharing

Copy URL Twitter E-mail

General

Target

ead274f7ec552e5f1e0b72828b2e3d295320e2ba764692d46fb84a953192724b
Size

366KB
MD5

71e1ea9554a4720d6786d6ed790110db
SHA1

6ba109ead90b2118bc954374b109f4827329edb7
SHA256

ead274f7ec552e5f1e0b72828b2e3d295320e2ba764692d46fb84a953192724b
SHA512

86c960c198200cc4cb32ee1241eccca55fe95ee53b90d6153a6697a454ce5cfb0610f7890b4092b527ca03bc034e85ea9f55a5fc21eae2a42f98bde08304d380
SSDEEP

6144:fdj1PDwJv8US0Tnm9ttxk6SBS2EktHDtY4LjtwrbTXo:x1PDwJvE0Tm98A2Ek1tRtwrQ

Score

N/A

Malware Config

Signatures

Files

ead274f7ec552e5f1e0b72828b2e3d295320e2ba764692d46fb84a953192724b
.dll windows x86

Code Sign

0b:04:7d:a9:06:01:b6:65:ad:8f:2e:d5:b3:1b:7e:ca
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

06/11/2019, 00:00

Not After

09/11/2021, 12:00

Subject

CN=Firetrust Ltd,O=Firetrust Ltd,L=Christchurch,ST=Canterbury,C=NZ

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ad:79:56:63:87:70:c3:f9:75:3d:da:20:95:6a:b5:e6:9e:a9:18:f8
Signer

Actual PE Digest

ad:79:56:63:87:70:c3:f9:75:3d:da:20:95:6a:b5:e6:9e:a9:18:f8

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Firetrust Ltd,O=Firetrust Ltd,L=Christchurch,ST=Canterbury,C=NZ

08/07/2020, 04:05
Valid: true

Chain 1

CN=Firetrust Ltd,O=Firetrust Ltd,L=Christchurch,ST=Canterbury,C=NZ

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ExportIncredimailAccounts
ExportOutlookAccounts
ExportOutlookExpressAccounts
ExportThunderbirdAccounts
ExportWLMAccounts
ExportWinmailAccounts
GetAccountList
GetAccountListXML
GetOutlookVersion
SetDebugMode
ShowBalloonTip

Sections

CODE
Size: 318KB - Virtual size: 317KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 383B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

0b:04:7d:a9:06:01:b6:65:ad:8f:2e:d5:b3:1b:7e:caCertificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

ad:79:56:63:87:70:c3:f9:75:3d:da:20:95:6a:b5:e6:9e:a9:18:f8Signer

Signature Validations

Verification

08/07/2020, 04:05 Valid: true

Chain 1

Headers

File Characteristics

Exports

Exports

Sections

CODE Size: 318KB - Virtual size: 317KB

DATA Size: 6KB - Virtual size: 5KB

BSS Size: - Virtual size: 2KB

.idata Size: 4KB - Virtual size: 3KB

.edata Size: 512B - Virtual size: 383B

.reloc Size: 19KB - Virtual size: 19KB

.rsrc Size: 10KB - Virtual size: 10KB

0b:04:7d:a9:06:01:b6:65:ad:8f:2e:d5:b3:1b:7e:ca
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

ad:79:56:63:87:70:c3:f9:75:3d:da:20:95:6a:b5:e6:9e:a9:18:f8
Signer

08/07/2020, 04:05
Valid: true

CODE
Size: 318KB - Virtual size: 317KB

DATA
Size: 6KB - Virtual size: 5KB

BSS
Size: - Virtual size: 2KB

.idata
Size: 4KB - Virtual size: 3KB

.edata
Size: 512B - Virtual size: 383B

.reloc
Size: 19KB - Virtual size: 19KB

.rsrc
Size: 10KB - Virtual size: 10KB